Security Control Assessor (Cybersecurity)

Location: On-site in Alexandria, Virginia, United States; active Secret security clearance required

Salary: $60,000–$180,000 USD per year

Company

hirify.global provides IT services and cybersecurity solutions to the Federal Government and commercial customers, including security, cloud migration, software development, analytics, and infrastructure services.

What you will do

• Plan and execute security control assessments for information systems across Risk Management Framework Steps 0–7.
• Develop assessment procedures and methodologies aligned with NIST guidance and relevant security frameworks.
• Analyze control effectiveness, identify vulnerabilities and weaknesses, and validate control implementation through testing.
• Prepare Security Assessment Reports with findings and recommendations.
• Collaborate with system owners, ISSOs, and stakeholders during authorization activities.
• Verify remediation actions, support System Security Plans and POA&Ms, and perform follow-up assessments and continuous monitoring.

Requirements

• Active Secret security clearance required.
• Bachelor’s degree or equivalent relevant experience, plus 5+ years of relevant experience.
• One of the following certifications: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP.
• Strong knowledge of NIST RMF implementation guidance and vulnerability management practices.
• Hands-on experience with eMASS or similar Information Assurance tools.
• Experience analyzing vulnerability scans, assessing STIG implementations, conducting RMF Step 4 assessments, and performing continuous monitoring.

Culture & Benefits

• Full-time employee position with a competitive compensation package.
• Benefits are provided as part of the employee package.
• Work supports Federal Government programs and cybersecurity modernization initiatives.
• Company values diverse perspectives and supports veterans, transitioning service members, military spouses, and dependents.